Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa
File:                     ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa (raw, json)
Hash identifier:          4AOcnqxufzkiLAVQ2BXJN2VbSFDV9tRudkoWP1oQGpQ=
Subject key identifier:   86:55:AD:DE:A6:CC:2C:19:E8:03:9F:41:63:A1:4C:EB:6C:96:19:A8
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584A9D30EBA007B30F0CBA60C540
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     197715
IP address blocks:        104.156.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:eb:a0:07:b3:0f:0c:ba:60:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=642740fb-c26b-4949-a84e-d16a38eb5273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f3:d8:97:4f:05:78:c1:8a:dd:45:20:03:46:
                    cd:ba:c9:36:c5:4b:7a:1b:a6:6e:49:73:27:b6:75:
                    8c:ac:70:46:fa:0c:e8:5a:87:a8:c2:91:af:95:88:
                    d2:90:8a:d8:17:d9:85:17:d6:74:89:dd:0a:a7:82:
                    0c:58:c5:5d:0b:ef:ad:e4:6f:89:cf:aa:24:63:a1:
                    ad:59:6c:02:cf:96:ff:8e:de:01:e2:4c:7b:40:f7:
                    8a:34:1d:8f:62:81:64:8d:ee:2d:c1:24:5b:46:87:
                    9c:40:f8:86:a6:45:9b:bd:25:7b:52:aa:c3:19:50:
                    83:03:9a:d5:1b:f7:5d:3b:8d:d3:1b:11:6e:59:2e:
                    20:54:c5:e8:6d:80:b1:d9:fc:d1:46:67:73:6f:31:
                    3e:0c:00:85:25:7c:7c:ba:f4:5f:e0:25:d2:8c:d7:
                    87:17:8b:23:08:3a:bc:a0:ec:7c:86:5c:36:8c:ac:
                    65:91:e1:1f:24:54:20:8f:c5:75:a8:68:df:7d:6e:
                    2c:ef:80:e1:df:a8:5a:74:ab:4e:a8:c1:e2:7d:6f:
                    0f:8a:72:97:b1:cc:41:d7:1e:86:6e:46:86:92:27:
                    7e:40:f9:be:e2:1a:5b:87:f0:2e:f4:43:aa:b5:5b:
                    75:79:28:58:26:e4:88:6b:dc:58:50:48:ea:cd:46:
                    64:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:55:AD:DE:A6:CC:2C:19:E8:03:9F:41:63:A1:4C:EB:6C:96:19:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/ba6b1a75-088e-30b8-a0f9-700a23d4f756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.156.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:1e:0c:bf:f4:fc:0a:16:ce:cd:a8:e2:87:a7:7a:35:c2:56:
         5c:45:b3:2b:77:36:26:2b:69:5f:b8:9e:de:0a:f4:f0:81:81:
         f2:4d:7e:3e:bc:1c:e8:8a:df:fd:94:88:36:00:4c:27:96:19:
         58:b1:a3:84:09:1f:41:99:cc:f5:83:c0:7f:6e:4c:44:2e:3f:
         41:c7:98:8c:a0:58:a1:4f:ac:00:ba:09:78:2a:db:d3:55:fb:
         0a:8f:a1:ab:e4:c9:63:a3:42:49:3d:d2:2f:27:d8:ac:02:d8:
         74:0a:86:bf:84:8a:cb:7b:90:33:36:e3:08:86:84:a7:05:36:
         6b:37:6d:ba:08:d5:60:cb:b4:ad:39:75:1c:8f:57:7e:57:49:
         33:d3:c4:1a:2d:14:06:58:11:68:ba:bf:a3:03:22:be:c9:bd:
         fe:b5:8a:cc:51:8a:20:4d:ed:32:bc:19:d6:11:31:7e:88:93:
         0c:93:05:1d:84:64:f9:60:3f:1a:8d:8a:43:b8:e9:a1:5c:57:
         d3:5d:c2:d8:d6:c8:50:1f:73:b5:2f:4f:dd:f6:94:f0:c5:f3:
         1d:0b:94:ee:29:54:bf:e8:ef:1c:00:c5:a5:ff:8c:84:89:e5:
         97:4d:09:5d:f5:1b:a6:c3:b8:11:85:25:13:68:e8:1e:ed:87:
         9a:3e:49:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:06:53 2025 by rpki-client